9df4afe01800a0002c764dec9d9146e3a13d65433953c90678fb4d592e1c4d84 | Triage

Sharing

General

Target

29ff56672d300b0afdcb5cb488045ee0N.exe
Size

64KB
Sample

240825-c436kasgrb
MD5

29ff56672d300b0afdcb5cb488045ee0
SHA1

d8caafb91bd9f818fdca56b5ba2d5bb6363b7f24
SHA256

9df4afe01800a0002c764dec9d9146e3a13d65433953c90678fb4d592e1c4d84
SHA512

ad19802c3a7a72232d930df00c8061a54fd33d3588a95ffd549536a099e3c5898a36ec9f684a090029c3b99e1caab1f35d366a0f0e630da77df8cd5a8bd5da76
SSDEEP

1536:dMmfdrcXO7czEbzfqtlOWyewrPFW2iwTbW:dMmVr3goHqt4X9FW2VTbW

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  29ff56672d300b0afdcb5cb488045ee0N.exe
- Size
  
  64KB
- MD5
  
  29ff56672d300b0afdcb5cb488045ee0
- SHA1
  
  d8caafb91bd9f818fdca56b5ba2d5bb6363b7f24
- SHA256
  
  9df4afe01800a0002c764dec9d9146e3a13d65433953c90678fb4d592e1c4d84
- SHA512
  
  ad19802c3a7a72232d930df00c8061a54fd33d3588a95ffd549536a099e3c5898a36ec9f684a090029c3b99e1caab1f35d366a0f0e630da77df8cd5a8bd5da76
- SSDEEP
  
  1536:dMmfdrcXO7czEbzfqtlOWyewrPFW2iwTbW:dMmVr3goHqt4X9FW2VTbW
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence